cobaltstrike | d7dc25e8d2a60f5d88c5731fcff3231f4246e3c0791c06fe9c54bed27ea61097 | Triage

Sharing

General

Target

d7dc25e8d2a60f5d88c5731fcff3231f4246e3c0791c06fe9c54bed27ea61097.exe
Size

19KB
Sample

240616-rd82fswcnb
MD5

937784485869bc97b6e2b14e994723d3
SHA1

5d026a2d5f4ad872ed4802a401374dcc4f0712b6
SHA256

d7dc25e8d2a60f5d88c5731fcff3231f4246e3c0791c06fe9c54bed27ea61097
SHA512

d8629f54578f67c63cfb769417e0fa9d89a4905b5f75afc6eb743a976168f432aa861dda3419404a2504ea98c2c4ea5a410c759fda1787c8533cc6c4000740fa
SSDEEP

192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bctjcWF8qa1Dojjgi:8qaCF31cix+Dc4zjkQFF46gi

Score

10^/10

cobaltstrike backdoor trojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://82.156.199.229:40001/NQtJ

Attributes

user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0) Host: 82.156.199.229

Targets

- Target
  
  d7dc25e8d2a60f5d88c5731fcff3231f4246e3c0791c06fe9c54bed27ea61097.exe
- Size
  
  19KB
- MD5
  
  937784485869bc97b6e2b14e994723d3
- SHA1
  
  5d026a2d5f4ad872ed4802a401374dcc4f0712b6
- SHA256
  
  d7dc25e8d2a60f5d88c5731fcff3231f4246e3c0791c06fe9c54bed27ea61097
- SHA512
  
  d8629f54578f67c63cfb769417e0fa9d89a4905b5f75afc6eb743a976168f432aa861dda3419404a2504ea98c2c4ea5a410c759fda1787c8533cc6c4000740fa
- SSDEEP
  
  192:yV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/2bctjcWF8qa1Dojjgi:8qaCF31cix+Dc4zjkQFF46gi
Score

10^/10

cobaltstrike backdoor trojan
- Cobaltstrike
  Detected malicious payload which is part of Cobaltstrike.
  trojan backdoor cobaltstrike
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

cobaltstrikebackdoortrojan

behavioral2

cobaltstrikebackdoortrojan